[serve] Directory index of arbitrary folder available due to lack of sanitization of %2e and %2f characters in url

This report is about Arbitrary Directory Listing vulnerability I found in serve module. Vulnerability does not allow to open arbitrary file due to module which handles file reading and implements its own validation and protection against Path Traversal attacks.

However